Wpcalc
8 CVEs across 5 Wpcalc products. Browse Wpcalc vulnerabilities, severities, and proof-of-concept exploits.
Wpcalc products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-12115 | Medium | 6.6 | 2026-06-17 | The Counter Box – Add Countdowns, Timers & Dynamic Counters to WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and… |
CVE-2025-12122 | Medium | 6.4 | 2026-02-18 | The Popup Box – Easily Create WordPress Popups plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'iframeBox' shortcode in all… |
CVE-2024-13901 | Medium | 4.4 | 2025-03-01 | The Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting… |
CVE-2025-0897 | Medium | 6.4 | 2025-02-20 | The Modal Window – create popup modal window plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'iframeBox' shortcode in all ve… |
CVE-2024-2457 | Medium | 6.4 | 2024-04-09 | The Modal Window – create popup modal window plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up… |
CVE-2024-0703 | Medium | 4.4 | 2024-01-23 | The Sticky Buttons – floating buttons builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via sticky URLs in all versions up to, and incl… |
CVE-2023-5161 | Medium | 6.4 | 2023-09-27 | The Modal Window plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 5.3.5 due to insufficient i… |
CVE-2023-0895 | High | 7.2 | 2023-02-17 | The WP Coder – add custom html, css and js code plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in versions up to, and in… |